IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 



l re Applicant: § 

PELED Ariel, et al § 
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Serial No.: 10/748,178 § 

§ 

Filed- 31 December 2003 § 

§ 

For; Method and System for Protecting § 

Confidential Information § Attorney 

§ Docket: 27153 

Commissioner for Patents 
PO Box 1450 

Alexandria, VA 22313-1450 

PETITION AND RESPONSE TO NOTICE OF OMITTED ITEMS 
IN A NONPRO VISIONAL APPLICATION 

Sir; 

This Petition is in response to the attached Notice of Omitted Items dated 
15 October 2004, for the above-referenced Application. 

By said Notice, the Initial Patent Examination Division indicated that Page 32 of the 
specification was omitted from the application. 

Applicant contends that the actual filing included Page 32 of the specification , as 
evidenced by the attached photocopy of the return postcard containing the Mail Room Stamp, 
indicating that 60 specification pages, not including the abstract, were duly received by the 
USPTO on 31 December 2003. 

In any event, we enclose a replacement copy of Page 32 of the specification that was 
previously submitted to the USPTO and which appears to have been misplaced by the 
USPTO. The submission of this replacement page should not be construed as an admission 
that it was not included in the original filing on 31 December 2003. 

Authorization to charge the petition fee of $130 to the Credit Card number listed on 
the attached Credit Card Payment Form PTO-2038 is attached herewith. In the event 
additional fees are required, please charge these additional fees to Deposit Account 50-1407. 
In the unlikely event payment by the Credit Card issuer is refused, please charge the petition 
fee of $130 to Deposit Account 50-1407. « 

However, since Applicant is of the belief that this page was in fact received by the *"* 
USPTO, no fee is required for this Petition and should be refunded. 5 
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flag. 

In a preferred embodiment of the present invention, the defined policy 
also includes adding forensic information to documents. This can be achieved 
by altering parts of the information object in a manner that is preferably 
5 substantially imperceptible, as described in PCT application number 
IL02/00464, filed June 16 th , 2002, the contents of which are hereby 
incorporated by reference. 

In another preferred embodiment of the present invention, the method 
includes avoiding the security risks posed by the shared clipboard resource, by 
10 transparently avoiding the use of the clipboard (i.e. blocking access to it from 
inside the application), and storing the information copied into the clipboard in 
an internal data structure (i.e. an internal, private clipboard) inaccessible to 
other applications. 

In a preferred embodiment of the present invention, the system utilizes 
1 5 methods that facilitate automatic installation and up-dates of clients, utilizing 
e.g., anti-virus installation or up-date infrastructure. 

In a preferred embodiment of the present invention, at least part of the 
software code of the client resides in an encrypted form. 

In a preferred embodiment of the present invention, the code is 
20 attached to the computer, e.g., by identifying the ID number of the CPU and 
use this number as a part of a cryptographic license. 

In a preferred embodiment of the present invention, the system is 
operable to automatically add headers, footers disclaimers etc. to each 
document, in accordance with a pre-defined policy. 
25 In a preferred embodiment of the present invention, the client-side 

software is operable to open the document only while connected to one or 
more. While connected, the server enforces a certain policy with respect to the 
document. The policy implies a set of restrictions regarding the usage of the 
the document. In a preferred embodiment of the present invention, more then 
30 one server is operable to define the policy. In cases where there is a conflict 
between the policies, the strictest policy applies. In another preferred 
embodiment of the present invention, connection to more then one server is 
required in order to define a policy. This can be achieved, e.g., by splitting the 
required information between the servers. Fig. 8 illustrates a system, similar to 



32 



